PE question

[CHCNiZ]

Hello, I am wondering if anyone knows a way to determine the size of a exe from its header? I have a massive blob of data with a executeable in the center and want to extract it and execute it.

[Lone_Rifle]

Hello, and thanks for dropping by. May I ask about your intentions? As you can understand, the development team does not wish to engage in clandestine activities and your query might serve in the building of, say, a worm that is small enough to escape most AV scanners (see recent exploits on Adobe Reader by the Chinese) which then decrypts and extracts an executable payload.

[hto]

SizeOfImage

[CHCNiZ]

My intention is because I am trying to extract the executeable of a game, and modify it, the executable is packed and cannot be disassembled, but in memory it is unpacked, I simply want to have that executeable that is unpacked, because I wish to modify it, without coding something to modify memory addresses of the process.

hto: thanks, I was told about this earlier before, but didn't see that the PE header isn't the main header, that its a bit after

[hto]

There is no guarantee that SizeOfImage will help; some executables, such as installers, can have stuff beyond it.